Skip to content

Commit 4b12dd5

Browse files
Update secure_software_development_fundamentals.md
Co-authored-by: Ashwin Ramaswami <[email protected]>
1 parent d6c240d commit 4b12dd5

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

secure_software_development_fundamentals.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2559,7 +2559,7 @@ This weakness can lead to vulnerabilities. For example:
25592559
parsing the query language the same way that the DBMS would -
25602560
it is doing simple text substitutions. So if the library implements this
25612561
functionality, it must typically make *guesses* of what types are expected.
2562-
For example, it may guess that associative arrays are only provided sent
2562+
For example, it may guess that associative arrays are only sent
25632563
to the library when that is sensible in the parameterized SQL query.
25642564
That guess, sadly, may be exploitable.
25652565
This is especially a risk in languages that don't require static types

0 commit comments

Comments
 (0)